[ GLSA 201406-24 ] Dnsmasq: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: Dnsmasq: Denial of Service (GLSA 201406-24)
Severity: normal
Exploitable: remote
Date: June 25, 2014
Bug(s): #436894, #453170
ID: 201406-24

Synopsis

A vulnerability in Dnsmasq can lead to a Denial of Service
condition.


Background

Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP
server.


Affected Packages

Package: net-dns/dnsmasq
Vulnerable: < 2.66
Unaffected: >= 2.66
Architectures: All supported architectures


Description

When used with certain libvirt configurations Dnsmasq replies to queries
from prohibited interfaces.


Impact

A remote attackers can cause a Denial of Service via spoofed TCP based
DNS queries.


Workaround

There is no known workaround at this time.

Resolution

All Dnsmasq users should upgrade to the latest version: